jwtbf.py - Simple script to brute force JWT token signature using a wordlist

For JWT info, refer to https://jwt.io/introduction/

Requirements

This script requires PyJWT Package Refer to this link for proper documentation/installation https://pypi.python.org/pypi/PyJWT

Usage

For usage, supplies when asked JWT token then the target wordlist

user@host:~/jwtbf# python jwtbf.py
Enter JWT token:eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiYWRtaW4iOnRydWV9.TJVA95OrM7E2cBab30RMHrHDcEfxjoYZgeFONFh7HgQ
Enter wordlist name:wordlist.txt
Failed to verify token signature with the following key: test
Failed to verify token signature with the following key: test2
Success. Token decoded with the following key:secret
{u'admin': True, u'sub': u'1234567890', u'name': u'John Doe'}